Security

Access commerce web components but not the rest of system setup

Hello,

Wasnt able to find anything that helped so I am hoping someone here will be able to point me in the correct direction.  I am trying to accomplish the following:  Allow specific bookstore management staff the ability to utilize the 'Set up Commerce Web Components' area of 'System Setup' so they can manage the online bookstore yet not allow them access to the other areas of the 'System Setup' tab that they should not have.

Robo Help - Has anyone implemented?

Has anyone implemented Robo Help and integrated with eSeries or Public?

If so, do you have any resources that we can use? Are you hosting it on the same site as eSeries or Public or a separate site? 

Back door iMIS login using membership webservice without needing password

They want to be able to log as user in without a user password using our web service.   iMIS does not allow this as far as I know.   The membership web service always requires a password.  Yet if logging in from a third party system you may not know the password for the iMIS side :

Here’s the scenario:

 

 

 

Disaster recovery for using iMIS username/passwords with iMIS down

I have a client that wants users to be able to login using iMIS usernames/password without iMIS being up.   What they would like to do is copy hashed password field from iMIS to current system (for disaster recovery.) I know this is stored in aspnet_membership table.   Thing is without iMIS up you won’t be able to validate users with it unless ASI development shares how our encryption is done as far as I know. Is iMIS using standard Crypto which is part of the .NET framework?  Is there another way to meet this requirement?   

Manager Password Not Working After Upgrade

My client upgraded from 15.0.3 yesterday to iMIS 15.1.2 yesterday.

The Manager password was working, but after I ran the iMIS DB Repair Utility to Reset the Permissions and Prepare the database I am no longer able to login.

The error states the login is not valid. (Please see screenshot.)

The staff that is currently logged intot he desktop is able to continue working, but none of the staff are able to login to iMIS either.

Logging a User Into Public Views

I am looking for some code to log in a user into public views from a custom page within the public view site.

This is pretty easy, in that you should be able to use:

ValidateUser from the MembershipWebService.asmx Web Service, and be all set.

However, I have a bit of a twist.  I have an ID number and do not have the user's password.  I can get the record's username, but I have not way of knowing the password.  

Anyone know of a method that will allow this process?

How do you get the UserID from an authenticated SharePoint WebPart?

I'm building a SharePoint WebPart, and using iMIS 15.1.1

SSO is working, so the SharePoint client is authenticated.

---

How do I get the iMIS UserID?

Is there a method on the MembershipWebService.asmx that can do that for me?

If there is no suitable method available, please suggest an approach!

 

Thank you,

~ Boris

Support for external ReturnUrl (e.g. www.cnn.com)?

I am testing against a recent version of iMIS 15.1. My goal is to redirect a person to an external URL after logging in. I am passing http://www.cnn.com/ in via "ReturnUrl" (I also tested "ReturnURL") as a test case. So far my test (see below) results in the ReturnUrl being ignored:

AsiCommon/Controls/Shared/FormsAuthentication/Login.aspx?ReturnUrl=http%3A%2F%2Fwww.cnn.com%2F

Does anyone know how to get this Login.aspx page to redirect to an external URL?

Security logging

I'm working on an RFP for a new client who will go live on 15.1. Part of their requirements is full logging with attribution of security changes. Specifically, they need to capture every time:

  • A login is added or removed.
  • Password, disabled flag, enable date, expire date, module access levels are changed. (Logging the hashed password is sufficient and optional.)
  • User is added or removed from a role.

Various issues with login / security on iMIS 10.x.NET and 15

There are several problems that have been becoming more prevalent with iMIS 10.x.NET and iMIS15 involving various security and connection issues. Below, is a list of common issues and solutions:

  • 13: Type Mismatch Error when trying to log in through the desktop
  • The login account 'sa' has been locked out
  • The webpage is unavailable


These are becoming more common errors and are caused by several different possible problems: